$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/3F3EDA068CAB11EF8A61C244C4F9AE02.roa File: 3F3EDA068CAB11EF8A61C244C4F9AE02.roa (raw, json) Hash identifier: XyxksCtoE0dbUbNjUOHqzxhkRAFJROSlcs5wq94tPig= Subject key identifier: 29:BF:DF:24:26:21:36:41:BD:11:A6:C6:90:65:09:27:7B:E9:7A:09 Certificate issuer: /CN=A91EE03B/serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4 Certificate serial: 0312 Authority key identifier: B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/3F3EDA068CAB11EF8A61C244C4F9AE02.roa Signing time: Fri 07 Aug 2026 02:52:12 +0000 ROA not before: Fri 07 Aug 2026 02:52:12 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 153371 IP address blocks: 103.224.172.0/23 maxlen: 24 2401:b60:2c::/48 maxlen: 48 2401:b60:37::/48 maxlen: 48 2401:b60:38::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Sep 2026 02:23:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 786 (0x312) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE03B, serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4 Validity Not Before: Aug 7 02:52:12 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a75485c-e3c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:af:d9:03:dd:bc:50:e8:ec:f7:36:da:a9:27: 5d:a4:53:6c:b5:26:4a:f3:e4:57:f3:db:fd:39:99: e3:33:33:94:f2:c4:d2:eb:82:f0:c5:3a:55:53:87: 2a:e5:e4:99:cf:92:c3:1a:9b:78:a1:96:41:e6:cc: b1:55:84:a1:05:f7:c7:26:d3:e8:6e:42:b9:14:95: 4d:b9:7c:12:89:88:3b:bd:33:fc:05:fc:36:9c:46: 88:5c:44:90:3d:a8:58:97:0a:eb:8a:5c:5a:89:b2: b0:be:23:a2:df:73:9f:b4:9d:73:cd:bc:e8:07:e7: f4:ef:73:0d:0a:f0:95:f9:20:54:db:a1:1d:cb:ad: 07:9b:b1:b9:95:a0:6f:92:6a:12:1c:30:9e:dd:49: 88:65:6a:33:6a:38:c8:5f:80:ee:ac:c8:61:32:b7: 33:a0:21:c3:78:e9:db:ae:0c:38:80:8f:f6:09:84: 84:cf:62:02:e3:2b:aa:63:73:2e:70:98:1f:9c:a1: 51:ce:e8:b0:f1:a8:98:8c:58:24:42:6f:7d:00:e6: f0:55:98:b0:f6:db:18:c9:9b:8e:31:61:44:15:aa: 96:db:54:4b:75:2a:7b:64:89:90:dc:b8:dd:8e:67: 1b:ac:8f:24:25:8c:50:57:78:32:e1:88:0d:5d:43: c5:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:BF:DF:24:26:21:36:41:BD:11:A6:C6:90:65:09:27:7B:E9:7A:09 X509v3 Authority Key Identifier: keyid:B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/3F3EDA068CAB11EF8A61C244C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.224.172.0/23 IPv6: 2401:b60:2c::/48 2401:b60:37::-2401:b60:38:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 6d:c7:a6:d0:c2:35:54:d3:7e:ce:00:b8:ab:1a:5b:9f:18:c0: fc:a4:7d:dd:01:01:be:96:f6:12:2e:6e:bc:82:2f:c3:05:39: a2:0f:ea:75:32:96:b3:a2:cb:2e:c6:d5:26:15:ad:46:90:cb: fe:90:0d:fe:ae:1c:b0:bd:a0:89:45:cf:44:71:49:2e:5f:9e: 67:d4:f3:50:f0:53:0b:8c:1c:77:57:e5:e6:d3:f8:be:48:02: a5:b5:ae:e9:a2:37:a4:9d:98:03:a4:60:69:03:93:f8:07:3d: 60:40:27:b9:a4:55:c2:2c:76:00:9b:ee:2f:47:59:d3:0e:bc: 8d:1b:e2:83:d6:9a:27:ee:6c:1e:29:a3:81:b9:63:70:96:dd: 40:bc:ac:04:9e:75:7b:ba:ce:a9:33:ec:55:09:33:24:e8:b5: 08:99:ce:c0:80:67:d4:a2:5c:cd:c9:c5:97:d2:4d:fb:67:ed: ca:d9:8b:0a:0b:64:cb:3b:52:25:b5:35:4e:9c:e3:11:88:c6: 2a:85:33:41:15:b1:4c:67:04:51:b2:db:37:f9:b5:84:2a:d8: d2:fb:d0:ae:6e:12:a8:58:19:9b:ca:65:3a:e7:5f:0c:ea:60: e2:f8:99:b9:fc:81:5b:66:f6:c6:f2:c6:59:07:bf:46:44:23: 0c:39:60:85 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgICAxIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUUwM0IxMTAvBgNVBAUTKEI5RTYwQ0YxNzlGNEVBQ0JEQjk0OTJCQTVGN0NBQ0Y0 NTIzOUNDRjQwHhcNMjYwODA3MDI1MjEyWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTc1NDg1Yy1lM2M3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2a/ZA928UOjs9zbaqSddpFNstSZK8+RX89v9OZnjMzOU8sTS64LwxTpVU4cq 5eSZz5LDGpt4oZZB5syxVYShBffHJtPobkK5FJVNuXwSiYg7vTP8Bfw2nEaIXESQ PahYlwrrilxaibKwviOi33OftJ1zzbzoB+f073MNCvCV+SBU26Edy60Hm7G5laBv kmoSHDCe3UmIZWozajjIX4DurMhhMrczoCHDeOnbrgw4gI/2CYSEz2IC4yuqY3Mu cJgfnKFRzuiw8aiYjFgkQm99AObwVZiw9tsYyZuOMWFEFaqW21RLdSp7ZImQ3Ljd jmcbrI8kJYxQV3gy4YgNXUPF+wIDAQABo4IChTCCAoEwHQYDVR0OBBYEFCm/3yQm ITZBvRGmxpBlCSd76XoJMB8GA1UdIwQYMBaAFLnmDPF59OrL25SSul98rPRSOcz0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTAzQi9BRjk2NzE2NjBC NkUxMUVFQjI5QkIxNzBDNEY5QUUwMi91ZVlNOFhuMDZzdmJsSks2WDN5czlGSTV6 UFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VlWU04WG4wNnN2YmxKSzZYM3lzOUZJNXpQUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUUwM0IvQUY5NjcxNjYwQjZFMTFFRUIyOUJCMTcwQzRGOUFFMDIvM0YzRURBMDY4 Q0FCMTFFRjhBNjFDMjQ0QzRGOUFFMDIucm9hMEQGCCsGAQUFBwEHAQH/BDUwMzAM BAIAATAGAwQBZ+CsMCMEAgACMB0DBwAkAQtgACwwEgMHACQBC2AANwMHACQBC2AA ODANBgkqhkiG9w0BAQsFAAOCAQEAbcem0MI1VNN+zgC4qxpbnxjA/KR93QEBvpb2 Ei5uvIIvwwU5og/qdTKWs6LLLsbVJhWtRpDL/pAN/q4csL2giUXPRHFJLl+eZ9Tz UPBTC4wcd1fl5tP4vkgCpbWu6aI3pJ2YA6RgaQOT+Ac9YEAnuaRVwix2AJvuL0dZ 0w68jRvig9aaJ+5sHimjgbljcJbdQLysBJ51e7rOqTPsVQkzJOi1CJnOwIBn1KJc zcnFl9JN+2ftytmLCgtkyztSJbU1TpzjEYjGKoUzQRWxTGcEUbLbN/m1hCrY0vvQ rm4SqFgZm8plOudfDOpg4viZufyBW2b2xvLGWQe/RkQjDDlghQ== -----END CERTIFICATE-----Generated at Fri Sep 4 23:47:01 2026 by rpki-client